【K8S】kubernetes-dashboard.yaml

ops/2024/11/1 4:04:34/
https://raw.githubusercontent.com/kubernetes/dashboard/v3.0.0-alpha0/charts/kubernetes-dashboard.yaml
以下链接的内容:

由于国内访问不了,找到一些方法下载了这个文件内容,

部署是mages 对象的镜像
WEB
docker.io/kubernetesui/dashboard-web:v1.0.0
API
docker.io/kubernetesui/dashboard-api:v1.0.0
Metrics Scraper
docker.io/kubernetesui/metrics-scraper:v1.0.9

yaml具体内容

# Copyright 2017 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.################################
### Namespaces
################################apiVersion: v1
kind: Namespace
metadata:name: kubernetes-dashboardlabels:app.kubernetes.io/part-of: kubernetes-dashboard---################################
### cert-manager
################################apiVersion: cert-manager.io/v1
kind: Issuer
metadata:name: selfsignednamespace: kubernetes-dashboardlabels:app.kubernetes.io/name: certmanagerapp.kubernetes.io/part-of: kubernetes-dashboard
spec:selfSigned: {}---################################
### Service Accounts
################################apiVersion: v1
kind: ServiceAccount
metadata:name: kubernetes-dashboardnamespace: kubernetes-dashboardlabels:app.kubernetes.io/part-of: kubernetes-dashboard---################################
### Secrets & Config Maps
################################apiVersion: v1
kind: Secret
metadata:name: kubernetes-dashboard-csrfnamespace: kubernetes-dashboardlabels:app.kubernetes.io/part-of: kubernetes-dashboard
type: Opaque
data:csrf: ""---apiVersion: v1
kind: Secret
metadata:name: kubernetes-dashboard-key-holdernamespace: kubernetes-dashboardlabels:app.kubernetes.io/part-of: kubernetes-dashboard
type: Opaque---kind: ConfigMap
apiVersion: v1
metadata:name: kubernetes-dashboard-settingsnamespace: kubernetes-dashboardlabels:app.kubernetes.io/part-of: kubernetes-dashboard---################################
### Roles & Bindings
################################kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:name: kubernetes-dashboardnamespace: kubernetes-dashboardlabels:app.kubernetes.io/part-of: kubernetes-dashboard
rules:# Allow Dashboard to get, update and delete Dashboard exclusive secrets.- apiGroups: [ "" ]resources: [ "secrets" ]resourceNames: [ "kubernetes-dashboard-key-holder", "kubernetes-dashboard-csrf" ]verbs: [ "get", "update", "delete" ]# Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.- apiGroups: [ "" ]resources: [ "configmaps" ]resourceNames: [ "kubernetes-dashboard-settings" ]verbs: [ "get", "update" ]# Allow Dashboard to get metrics.- apiGroups: [ "" ]resources: [ "services/proxy" ]resourceNames: [ "kubernetes-dashboard-metrics-scraper", "http:kubernetes-dashboard-metrics-scraper" ]verbs: [ "get" ]---kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:name: kubernetes-dashboardlabels:app.kubernetes.io/part-of: kubernetes-dashboard
rules:# Allow Metrics Scraper to get metrics from the Metrics server- apiGroups: [ "metrics.k8s.io" ]resources: [ "pods", "nodes" ]verbs: [ "get", "list", "watch" ]---apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:name: kubernetes-dashboardnamespace: kubernetes-dashboardlabels:app.kubernetes.io/part-of: kubernetes-dashboard
roleRef:apiGroup: rbac.authorization.k8s.iokind: Rolename: kubernetes-dashboard
subjects:- kind: ServiceAccountname: kubernetes-dashboardnamespace: kubernetes-dashboard---apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:name: kubernetes-dashboardlabels:app.kubernetes.io/part-of: kubernetes-dashboard
roleRef:apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: kubernetes-dashboard
subjects:- kind: ServiceAccountname: kubernetes-dashboardnamespace: kubernetes-dashboard---################################
### Services & Ingresses
################################kind: Service
apiVersion: v1
metadata:name: kubernetes-dashboard-webnamespace: kubernetes-dashboardlabels:app.kubernetes.io/name: kubernetes-dashboard-webapp.kubernetes.io/part-of: kubernetes-dashboardapp.kubernetes.io/component: webapp.kubernetes.io/version: "v1.0.0"
spec:ports:- name: webport: 8000selector:app.kubernetes.io/name: kubernetes-dashboard-webapp.kubernetes.io/part-of: kubernetes-dashboard---kind: Service
apiVersion: v1
metadata:name: kubernetes-dashboard-apinamespace: kubernetes-dashboardlabels:app.kubernetes.io/name: kubernetes-dashboard-apiapp.kubernetes.io/part-of: kubernetes-dashboardapp.kubernetes.io/component: apiapp.kubernetes.io/version: "v1.0.0"
spec:ports:- name: apiport: 9000selector:app.kubernetes.io/name: kubernetes-dashboard-apiapp.kubernetes.io/part-of: kubernetes-dashboard---kind: Service
apiVersion: v1
metadata:name: kubernetes-dashboard-metrics-scrapernamespace: kubernetes-dashboardlabels:app.kubernetes.io/name: kubernetes-dashboard-metrics-scraperapp.kubernetes.io/part-of: kubernetes-dashboardapp.kubernetes.io/component: metricsapp.kubernetes.io/version: "v1.0.9"
spec:ports:- port: 8000targetPort: 8000selector:app.kubernetes.io/name: kubernetes-dashboard-metrics-scraperapp.kubernetes.io/part-of: kubernetes-dashboard---kind: Ingress
apiVersion: networking.k8s.io/v1
metadata:name: kubernetes-dashboardnamespace: kubernetes-dashboardlabels:app.kubernetes.io/name: nginx-ingressapp.kubernetes.io/part-of: kubernetes-dashboardannotations:nginx.ingress.kubernetes.io/ssl-redirect: "true"cert-manager.io/issuer: selfsigned
spec:ingressClassName: nginxtls:- hosts:- localhostsecretName: kubernetes-dashboard-certsrules:- host: localhosthttp:paths:- path: /pathType: Prefixbackend:service:name: kubernetes-dashboard-webport:name: web- path: /apipathType: Prefixbackend:service:name: kubernetes-dashboard-apiport:name: api---################################
### Deployments
################################kind: Deployment
apiVersion: apps/v1
metadata:name: kubernetes-dashboard-apinamespace: kubernetes-dashboardlabels:app.kubernetes.io/name: kubernetes-dashboard-apiapp.kubernetes.io/part-of: kubernetes-dashboardapp.kubernetes.io/component: apiapp.kubernetes.io/version: "v1.0.0"
spec:replicas: 1revisionHistoryLimit: 10selector:matchLabels:app.kubernetes.io/name: kubernetes-dashboard-apiapp.kubernetes.io/part-of: kubernetes-dashboardtemplate:metadata:labels:app.kubernetes.io/name: kubernetes-dashboard-apiapp.kubernetes.io/part-of: kubernetes-dashboardapp.kubernetes.io/component: apiapp.kubernetes.io/version: "v1.0.0"spec:securityContext:seccompProfile:type: RuntimeDefaultcontainers:- name: kubernetes-dashboard-apiimage: docker.io/kubernetesui/dashboard-api:v1.0.0imagePullPolicy: IfNotPresentports:- containerPort: 9000name: apiprotocol: TCPargs:- --enable-insecure-login- --namespace=kubernetes-dashboardvolumeMounts:# Create on-disk volume to store exec logs- mountPath: /tmpname: tmp-volumesecurityContext:allowPrivilegeEscalation: falsereadOnlyRootFilesystem: truerunAsUser: 1001runAsGroup: 2001volumes:- name: tmp-volumeemptyDir: {}serviceAccountName: kubernetes-dashboard---kind: Deployment
apiVersion: apps/v1
metadata:name: kubernetes-dashboard-webnamespace: kubernetes-dashboardlabels:app.kubernetes.io/name: kubernetes-dashboard-webapp.kubernetes.io/part-of: kubernetes-dashboardapp.kubernetes.io/component: webapp.kubernetes.io/version: "v1.0.0"
spec:replicas: 1revisionHistoryLimit: 10selector:matchLabels:app.kubernetes.io/name: kubernetes-dashboard-webapp.kubernetes.io/part-of: kubernetes-dashboardtemplate:metadata:labels:app.kubernetes.io/name: kubernetes-dashboard-webapp.kubernetes.io/part-of: kubernetes-dashboardapp.kubernetes.io/component: webapp.kubernetes.io/version: "v1.0.0"spec:securityContext:seccompProfile:type: RuntimeDefaultcontainers:- name: kubernetes-dashboard-webimage: docker.io/kubernetesui/dashboard-web:v1.0.0imagePullPolicy: IfNotPresentports:- containerPort: 8000name: webprotocol: TCPvolumeMounts:# Create on-disk volume to store exec logs- mountPath: /tmpname: tmp-volumesecurityContext:allowPrivilegeEscalation: falsereadOnlyRootFilesystem: truerunAsUser: 1001runAsGroup: 2001volumes:- name: tmp-volumeemptyDir: {}serviceAccountName: kubernetes-dashboard---kind: Deployment
apiVersion: apps/v1
metadata:name: kubernetes-dashboard-metrics-scrapernamespace: kubernetes-dashboardlabels:app.kubernetes.io/name: kubernetes-dashboard-metrics-scraperapp.kubernetes.io/part-of: kubernetes-dashboardapp.kubernetes.io/component: metricsapp.kubernetes.io/version: "v1.0.9"
spec:replicas: 1revisionHistoryLimit: 10selector:matchLabels:app.kubernetes.io/name: kubernetes-dashboard-metrics-scraperapp.kubernetes.io/part-of: kubernetes-dashboardtemplate:metadata:labels:app.kubernetes.io/name: kubernetes-dashboard-metrics-scraperapp.kubernetes.io/part-of: kubernetes-dashboardapp.kubernetes.io/component: metricsapp.kubernetes.io/version: "v1.0.9"spec:securityContext:seccompProfile:type: RuntimeDefaultcontainers:- name: kubernetes-dashboard-metrics-scraperimage: docker.io/kubernetesui/metrics-scraper:v1.0.9imagePullPolicy: IfNotPresentports:- containerPort: 8000protocol: TCPlivenessProbe:httpGet:scheme: HTTPpath: /port: 8000initialDelaySeconds: 30timeoutSeconds: 30volumeMounts:- mountPath: /tmpname: tmp-volumesecurityContext:allowPrivilegeEscalation: falsereadOnlyRootFilesystem: truerunAsUser: 1001runAsGroup: 2001volumes:- name: tmp-volumeemptyDir: {}serviceAccountName: kubernetes-dashboard

http://www.ppmy.cn/ops/130027.html

相关文章

智能护栏碰撞监测终端:内蒙古高速的安全守护者

​ ​一、引言 ​ ​在内蒙古那辽阔的大地上,高速公路如动脉般纵横交错,是经济发展与人员流动的重要通道。而保障这些公路安全运行的关键因素之一,便是智能护栏碰撞监测终端。它以其卓越的性能,实时为公路安全保驾护航&…

vue封装信号强度

图标下载链接: https://pan.baidu.com/s/1828AidkCKU1KTkw1SvBwQg?pwd4k7n 共五格信号 信号5为绿色,信号4为绿色,信号3为黄色,信号2为黄色,信号1为红色,信号0为灰色。 子组件 /components/SignalStrength/index.vu…

SpringMVC实战(3):拓展

四、RESTFul风格设计和实战 4.1 RESTFul风格概述 4.1.1 RESTFul风格简介 RESTful(Representational State Transfer)是一种软件架构风格,用于设计网络应用程序和服务之间的通信。它是一种基于标准 HTTP 方法的简单和轻量级的通信协议&…

安全研究 | 不同编程语言中 IP 地址分类的不一致性

作为一名安全研究人员,我分析了不同编程语言中 IP 地址分类 的行为。最近,我注意到一些有趣的不一致性,特别是在循环地址和私有 IP 地址的处理上。在这篇文章中,我将分享我对此问题的观察和见解。 设置 我检查了多种编程语言&am…

如何应对PDF无法转换成其他格式?常见原因与解决方法解析

在日常工作中,PDF文件的格式转换是非常常见的操作,无论是转换为Word、Excel,还是其他格式,都会有一些方便的工具支持。然而,有时在转换PDF时可能会遇到无法转换的问题。这个时候,可以看看是不是以下几个原因…

vue3项目中引入阿里图标库

开篇 本篇的主题是在vue3项目中引入阿里图标库 步骤 注册阿里图标库账号(阿里图标),并创建项目 将图标加入项目中 将需要的图标先加入购物车,随后加入到项目中 生成项目代码 在项目中生成项目代码,便于后续复制到vue项目中 ## 在vue3项目…

高效集成聚水潭·奇门数据到MySQL的技术方案

聚水潭奇门数据集成到MySQL的技术案例分享 在本次技术案例中,我们将探讨如何通过轻易云数据集成平台,将聚水潭奇门的售后单数据高效、可靠地集成到MySQL数据库中。具体方案为“聚水潭-售后单-->BI虹盟-售后表”。这一过程不仅需要处理大量的数据&…

第二十章 Vue组件通信之父子通信

目录 一、引言 二、组件关系分类 三、组件通信的解决方案 3.1. 父子通信流程图 3.2. 父组件通过 props 将数据传递给子组件 3.2.1. 代码App.vue 3.2.2. 代码MySon.vue 3.3. 子组件利用 $emit 通知父组件修改更新 ​编辑3.3.1. 代码App.vue 3.3.2. 代码MySon.vue 3…